@dynamic-labs-wallet/browser-wallet-client 1.1.6 → 1.1.8

package/index.cjs

@@ -15,6 +15,19 @@ function _extends() {
     return _extends.apply(this, arguments);
 }
 
+function _object_without_properties_loose(source, excluded) {
+    if (source == null) return {};
+    var target = {};
+    var sourceKeys = Object.keys(source);
+    var key, i;
+    for(i = 0; i < sourceKeys.length; i++){
+        key = sourceKeys[i];
+        if (excluded.indexOf(key) >= 0) continue;
+        target[key] = source[key];
+    }
+    return target;
+}
+
 class IframeMessageHandler {
     // Handle error response from iframe message handler
     handleIframeMessageResponseError(response) {
@@ -612,6 +625,100 @@ const createIframeWaasSDKContainer = ()=>{
     }
 };
 
+/**
+ * One `setupIframeRequestHandlers` call's worth of registrations, grouped by
+ * lifetime.
+ */ /** Unregisters every handler in `disposers` and empties the list. */ const drainDisposers = (disposers)=>{
+    disposers.forEach((unsubscribe)=>unsubscribe());
+    disposers.length = 0;
+};
+/** Unregisters both halves of a registration. */ const disposeAllHandlers = ({ disposeSessionHandlers, disposeStorageHandlers })=>{
+    disposeSessionHandlers();
+    disposeStorageHandlers();
+};
+/**
+ * Lifetime bookkeeping for the iframe → host ("reverse channel") request
+ * handlers one IframeManager has attached to the shared container.
+ *
+ * A page has one WaaS iframe but every client built on it stays bridged to it,
+ * so the reverse channel is first-response-wins: a superseded manager with a
+ * revoked session callback rejects `getSignedSessionId` instantly and beats the
+ * live client's round-trip. This registry is what lets such a manager leave the
+ * race (see {@link detach}) without disturbing the key-share handlers, which
+ * the iframe still calls back during teardown.
+ */ class IframeRequestHandlerRegistry {
+    get sessionHandlerCount() {
+        return this.sessionDisposers.length;
+    }
+    get storageHandlerCount() {
+        return this.storageDisposers.length;
+    }
+    /** Capture the current generations before awaiting the iframe. */ snapshot() {
+        return {
+            cleanupGeneration: this.cleanupGeneration,
+            detachGeneration: this.detachGeneration
+        };
+    }
+    /**
+   * Takes ownership of a registration whose setup started at `epoch`, keeping
+   * whichever halves are still legitimate, and reports whether the registration
+   * is the manager's current one (the caller's channel is only worth keeping
+   * then). The host doesn't await `initialize()`, so a detach or a cleanup can
+   * land while the iframe is still loading — which one moved decides:
+   *
+   * - **Torn down** (cleanup): keep nothing. The lists this would land on are
+   *   already drained, so anything tracked here would stay attached to a
+   *   logged-out manager forever.
+   * - **Superseded** (detach): the session handlers would put this manager back
+   *   into the race, but its key-share handlers still answer honestly — and on a
+   *   first initialization they are the only ones the page has.
+   * - **Neither**: track both.
+   */ adopt(epoch, registration) {
+        if (this.cleanupGeneration !== epoch.cleanupGeneration) {
+            disposeAllHandlers(registration);
+            return false;
+        }
+        if (this.detachGeneration !== epoch.detachGeneration) {
+            registration.disposeSessionHandlers();
+            this.storageDisposers.push(registration.disposeStorageHandlers);
+            return false;
+        }
+        this.sessionDisposers.push(registration.disposeSessionHandlers);
+        this.storageDisposers.push(registration.disposeStorageHandlers);
+        return true;
+    }
+    /**
+   * Stops answering the session-scoped requests, and nothing else. Safe to call
+   * repeatedly, and mid-initialization: a registration still in flight is
+   * adopted as "superseded".
+   */ detach() {
+        this.detachGeneration += 1;
+        drainDisposers(this.sessionDisposers);
+    }
+    /**
+   * First phase of a teardown: leave the session race immediately, and mark
+   * anything still initializing as torn down rather than merely superseded. The
+   * storage handlers stay until {@link disposeStorageHandlers}, because the
+   * iframe's own cleanup clears each wallet's shares over this channel.
+   */ markTornDown() {
+        this.cleanupGeneration += 1;
+        this.detach();
+    }
+    /** Second phase of a teardown: drop the key-share handlers, once the iframe has finished calling back. */ disposeStorageHandlers() {
+        drainDisposers(this.storageDisposers);
+    }
+    constructor(){
+        /**
+   * Lists, not single entries: `initializeMessageTransport` checks its guard
+   * *then* awaits, so one manager can end up registered on two transports that
+   * both answer, and overwriting would orphan the first.
+   */ this.sessionDisposers = [];
+        this.storageDisposers = [];
+        /** Bumped by {@link detach}. */ this.detachGeneration = 0;
+        /** Bumped by {@link markTornDown}. */ this.cleanupGeneration = 0;
+    }
+}
+
 const FRAME_ANCESTORS_QUERY_PARAM = 'frameAncestors';
 /**
  * Builds the iframe message transport with the recovery + block decorators.
@@ -853,6 +960,8 @@ class IframeManager {
             this.logger.debug('Skipping initializeMessageTransport: transport and message handler already initialized');
             return;
         }
+        // Captured before the await: detach() or cleanup() can run while the iframe loads.
+        const epoch = this.requestHandlers.snapshot();
         await this.initializeIframeCommunication();
         const transport = createIframeMessageTransport();
         this.messageTransport = transport;
@@ -870,7 +979,12 @@ class IframeManager {
         // Set up request channel to handle messages from iframe (for secureStorage,
         // getSignedSessionId, and the unauthorized notification)
         if (this.secureStorage || this.getSignedSessionIdCallback || this.onUnauthorized) {
-            this.iframeRequestChannel = this.setupIframeRequestHandlers(this.messageTransport);
+            const _this_setupIframeRequestHandlers = this.setupIframeRequestHandlers(this.messageTransport), { requestChannel } = _this_setupIframeRequestHandlers, registration = _object_without_properties_loose(_this_setupIframeRequestHandlers, [
+                "requestChannel"
+            ]);
+            if (this.requestHandlers.adopt(epoch, registration)) {
+                this.iframeRequestChannel = requestChannel;
+            }
         }
         // The recovery callback runs synchronously when the request channel's
         // timeout calls triggerRecovery. block() must run before we await anything
@@ -961,26 +1075,37 @@ class IframeManager {
     }
     /**
    * Sets up message handlers for iframe → host requests (secureStorage and getSignedSessionId)
+   *
+   * Returns the channel plus one disposer per lifetime group, covering exactly the
+   * handlers this call attached. Scoped per call because three different transports
+   * use it — pooling them would let a display flow take ownership of the shared
+   * container's handlers.
    */ setupIframeRequestHandlers(transport) {
         // Create a request channel to handle requests FROM iframe
         const requestChannel = messageTransport.createRequestChannel(transport);
-        if (this.secureStorage) {
-            // Handle getClientKeyShare requests from iframe
-            requestChannel.handle('getClientKeyShare', this.handleGetClientKeyShare.bind(this));
-            // Handle setClientKeyShare requests from iframe
-            requestChannel.handle('setClientKeyShare', this.handleSetClientKeyShare.bind(this));
-            // Handle removeClientKeyShare requests from iframe
-            requestChannel.handle('removeClientKeyShare', this.handleRemoveClientKeyShare.bind(this));
-        }
+        // handle() returns the unsubscribe; each entry here is one registration.
+        // secureStorage: key-share reads/writes, answered identically by any manager
+        // on the page, so they are not part of a detach.
+        const storageDisposers = this.secureStorage ? [
+            requestChannel.handle('getClientKeyShare', this.handleGetClientKeyShare.bind(this)),
+            requestChannel.handle('setClientKeyShare', this.handleSetClientKeyShare.bind(this)),
+            requestChannel.handle('removeClientKeyShare', this.handleRemoveClientKeyShare.bind(this))
+        ] : [];
+        // Session-scoped: both answer from this client's own session state, so a
+        // superseded manager must stop answering them the moment it is detached.
+        const sessionDisposers = [];
         if (this.getSignedSessionIdCallback) {
-            // Handle getSignedSessionId requests from iframe
-            requestChannel.handle('getSignedSessionId', this.handleGetSignedSessionId.bind(this));
+            sessionDisposers.push(requestChannel.handle('getSignedSessionId', this.handleGetSignedSessionId.bind(this)));
         }
+        // The iframe's 401 notification (iframe → host)
         if (this.onUnauthorized) {
-            // Handle the iframe's 401 notification (iframe → host)
-            requestChannel.handle('notifyUnauthorized', this.handleNotifyUnauthorized.bind(this));
+            sessionDisposers.push(requestChannel.handle('notifyUnauthorized', this.handleNotifyUnauthorized.bind(this)));
         }
-        return requestChannel;
+        return {
+            disposeSessionHandlers: ()=>drainDisposers(sessionDisposers),
+            disposeStorageHandlers: ()=>drainDisposers(storageDisposers),
+            requestChannel
+        };
     }
     /**
    * Handler for the iframe's `notifyUnauthorized` reverse-channel request.
@@ -1303,9 +1428,7 @@ class IframeManager {
             const iframeDisplay = new IframeMessageHandler(transport);
             // Set up iframe request handlers on this transport so the display iframe
             // can access key shares (e.g. for exportPrivateKey) and signed session ID
-            if (this.secureStorage || this.getSignedSessionIdCallback) {
-                this.setupIframeRequestHandlers(transport);
-            }
+            const requestHandlers = this.secureStorage || this.getSignedSessionIdCallback ? this.setupIframeRequestHandlers(transport) : undefined;
             var _this_authMode;
             // if authMode is header: inform iframe the authMode with auth token
             // if authMode is cookie:  inform iframe the authMode with empty authToken
@@ -1314,6 +1437,9 @@ class IframeManager {
                 iframe,
                 iframeDisplay,
                 cleanup: ()=>{
+                    if (requestHandlers) {
+                        disposeAllHandlers(requestHandlers);
+                    }
                     cleanupBridge();
                     iframe.remove();
                 }
@@ -1400,9 +1526,7 @@ class IframeManager {
             // Set up iframe request handlers on this transport so the display
             // container can access key shares (e.g. for exportPrivateKey) and the
             // signed session ID — mirrors initializeIframeDisplayForContainer.
-            if (this.secureStorage || this.getSignedSessionIdCallback) {
-                this.setupIframeRequestHandlers(transport);
-            }
+            const requestHandlers = this.secureStorage || this.getSignedSessionIdCallback ? this.setupIframeRequestHandlers(transport) : undefined;
             var _this_authMode;
             // if authMode is header: inform the container of the authMode with auth token
             // if authMode is cookie:  inform the container of the authMode with empty authToken
@@ -1410,6 +1534,9 @@ class IframeManager {
             return {
                 iframeDisplay,
                 cleanup: ()=>{
+                    if (requestHandlers) {
+                        disposeAllHandlers(requestHandlers);
+                    }
                     cleanupBridge();
                     waasSDKContainer.destroy();
                 }
@@ -1419,7 +1546,30 @@ class IframeManager {
             throw error;
         }
     }
+    /**
+   * Stops this manager answering the iframe's *session-scoped* reverse-channel
+   * requests (iframe → host), and nothing else. Call it on a manager superseded
+   * by a newer one for the same page.
+   *
+   * Every bridged manager answers every iframe → host request and the channel is
+   * first-response-wins, so a superseded manager with revoked host callbacks
+   * rejects `getSignedSessionId` instantly and beats the live one's round-trip —
+   * killing wallet creation for the life of the iframe.
+   *
+   * Narrow on purpose. The key-share handlers stay: they proxy host storage by
+   * address, so any manager answers them identically, and the iframe still needs
+   * them to clear shares during {@link cleanup}. Transport, bridge, recovery
+   * subscription and container membership stay too, so in-flight operations still
+   * get their responses (tearing them down makes an in-flight wallet creation hang
+   * forever). Use {@link cleanup} for a real teardown, and call this any time —
+   * including mid-initialization.
+   */ detach() {
+        this.requestHandlers.detach();
+    }
     async cleanup() {
+        // Detach up front, so a logged-out manager stops answering signed-session
+        // requests immediately instead of once the ACK below returns (or times out).
+        this.requestHandlers.markTornDown();
         // Best-effort ACK (the iframe clears its storage), only if already
         // initialized. Do NOT initialize here: that mounts a fresh container just to
         // ACK and then tears it down, churning the shared container across
@@ -1449,6 +1599,9 @@ class IframeManager {
         // detached one); re-arm the unauthorized guard for a future session.
         this.messageTransport = null;
         this.iframeMessageHandler = null;
+        // Key-share handlers go last: the iframe's cleanup above clears each wallet's
+        // shares over this channel and needs a host still answering.
+        this.requestHandlers.disposeStorageHandlers();
         this.iframeRequestChannel = undefined;
         this.unauthorizedHandled = false;
     }
@@ -1465,6 +1618,11 @@ class IframeManager {
    * it — otherwise the request channel's retry timer keeps firing recovery against
    * a torn-down transport on the next session. */ this.cleanupRecoverySubscription = null;
         this.iframe = null;
+        /**
+   * Lifetimes of the shared container's reverse-channel handlers: which of them
+   * a superseded manager stops answering ({@link detach}) and which outlive it
+   * until teardown ({@link cleanup}).
+   */ this.requestHandlers = new IframeRequestHandlerRegistry();
         this.waasSDKContainer = null;
         /** One-shot guard so a burst of 401 notifications triggers a single logout. */ this.unauthorizedHandled = false;
         this.environmentId = environmentId;

package/index.esm.js

@@ -14,6 +14,19 @@ function _extends() {
     return _extends.apply(this, arguments);
 }
 
+function _object_without_properties_loose(source, excluded) {
+    if (source == null) return {};
+    var target = {};
+    var sourceKeys = Object.keys(source);
+    var key, i;
+    for(i = 0; i < sourceKeys.length; i++){
+        key = sourceKeys[i];
+        if (excluded.indexOf(key) >= 0) continue;
+        target[key] = source[key];
+    }
+    return target;
+}
+
 class IframeMessageHandler {
     // Handle error response from iframe message handler
     handleIframeMessageResponseError(response) {
@@ -611,6 +624,100 @@ const createIframeWaasSDKContainer = ()=>{
     }
 };
 
+/**
+ * One `setupIframeRequestHandlers` call's worth of registrations, grouped by
+ * lifetime.
+ */ /** Unregisters every handler in `disposers` and empties the list. */ const drainDisposers = (disposers)=>{
+    disposers.forEach((unsubscribe)=>unsubscribe());
+    disposers.length = 0;
+};
+/** Unregisters both halves of a registration. */ const disposeAllHandlers = ({ disposeSessionHandlers, disposeStorageHandlers })=>{
+    disposeSessionHandlers();
+    disposeStorageHandlers();
+};
+/**
+ * Lifetime bookkeeping for the iframe → host ("reverse channel") request
+ * handlers one IframeManager has attached to the shared container.
+ *
+ * A page has one WaaS iframe but every client built on it stays bridged to it,
+ * so the reverse channel is first-response-wins: a superseded manager with a
+ * revoked session callback rejects `getSignedSessionId` instantly and beats the
+ * live client's round-trip. This registry is what lets such a manager leave the
+ * race (see {@link detach}) without disturbing the key-share handlers, which
+ * the iframe still calls back during teardown.
+ */ class IframeRequestHandlerRegistry {
+    get sessionHandlerCount() {
+        return this.sessionDisposers.length;
+    }
+    get storageHandlerCount() {
+        return this.storageDisposers.length;
+    }
+    /** Capture the current generations before awaiting the iframe. */ snapshot() {
+        return {
+            cleanupGeneration: this.cleanupGeneration,
+            detachGeneration: this.detachGeneration
+        };
+    }
+    /**
+   * Takes ownership of a registration whose setup started at `epoch`, keeping
+   * whichever halves are still legitimate, and reports whether the registration
+   * is the manager's current one (the caller's channel is only worth keeping
+   * then). The host doesn't await `initialize()`, so a detach or a cleanup can
+   * land while the iframe is still loading — which one moved decides:
+   *
+   * - **Torn down** (cleanup): keep nothing. The lists this would land on are
+   *   already drained, so anything tracked here would stay attached to a
+   *   logged-out manager forever.
+   * - **Superseded** (detach): the session handlers would put this manager back
+   *   into the race, but its key-share handlers still answer honestly — and on a
+   *   first initialization they are the only ones the page has.
+   * - **Neither**: track both.
+   */ adopt(epoch, registration) {
+        if (this.cleanupGeneration !== epoch.cleanupGeneration) {
+            disposeAllHandlers(registration);
+            return false;
+        }
+        if (this.detachGeneration !== epoch.detachGeneration) {
+            registration.disposeSessionHandlers();
+            this.storageDisposers.push(registration.disposeStorageHandlers);
+            return false;
+        }
+        this.sessionDisposers.push(registration.disposeSessionHandlers);
+        this.storageDisposers.push(registration.disposeStorageHandlers);
+        return true;
+    }
+    /**
+   * Stops answering the session-scoped requests, and nothing else. Safe to call
+   * repeatedly, and mid-initialization: a registration still in flight is
+   * adopted as "superseded".
+   */ detach() {
+        this.detachGeneration += 1;
+        drainDisposers(this.sessionDisposers);
+    }
+    /**
+   * First phase of a teardown: leave the session race immediately, and mark
+   * anything still initializing as torn down rather than merely superseded. The
+   * storage handlers stay until {@link disposeStorageHandlers}, because the
+   * iframe's own cleanup clears each wallet's shares over this channel.
+   */ markTornDown() {
+        this.cleanupGeneration += 1;
+        this.detach();
+    }
+    /** Second phase of a teardown: drop the key-share handlers, once the iframe has finished calling back. */ disposeStorageHandlers() {
+        drainDisposers(this.storageDisposers);
+    }
+    constructor(){
+        /**
+   * Lists, not single entries: `initializeMessageTransport` checks its guard
+   * *then* awaits, so one manager can end up registered on two transports that
+   * both answer, and overwriting would orphan the first.
+   */ this.sessionDisposers = [];
+        this.storageDisposers = [];
+        /** Bumped by {@link detach}. */ this.detachGeneration = 0;
+        /** Bumped by {@link markTornDown}. */ this.cleanupGeneration = 0;
+    }
+}
+
 const FRAME_ANCESTORS_QUERY_PARAM = 'frameAncestors';
 /**
  * Builds the iframe message transport with the recovery + block decorators.
@@ -852,6 +959,8 @@ class IframeManager {
             this.logger.debug('Skipping initializeMessageTransport: transport and message handler already initialized');
             return;
         }
+        // Captured before the await: detach() or cleanup() can run while the iframe loads.
+        const epoch = this.requestHandlers.snapshot();
         await this.initializeIframeCommunication();
         const transport = createIframeMessageTransport();
         this.messageTransport = transport;
@@ -869,7 +978,12 @@ class IframeManager {
         // Set up request channel to handle messages from iframe (for secureStorage,
         // getSignedSessionId, and the unauthorized notification)
         if (this.secureStorage || this.getSignedSessionIdCallback || this.onUnauthorized) {
-            this.iframeRequestChannel = this.setupIframeRequestHandlers(this.messageTransport);
+            const _this_setupIframeRequestHandlers = this.setupIframeRequestHandlers(this.messageTransport), { requestChannel } = _this_setupIframeRequestHandlers, registration = _object_without_properties_loose(_this_setupIframeRequestHandlers, [
+                "requestChannel"
+            ]);
+            if (this.requestHandlers.adopt(epoch, registration)) {
+                this.iframeRequestChannel = requestChannel;
+            }
         }
         // The recovery callback runs synchronously when the request channel's
         // timeout calls triggerRecovery. block() must run before we await anything
@@ -960,26 +1074,37 @@ class IframeManager {
     }
     /**
    * Sets up message handlers for iframe → host requests (secureStorage and getSignedSessionId)
+   *
+   * Returns the channel plus one disposer per lifetime group, covering exactly the
+   * handlers this call attached. Scoped per call because three different transports
+   * use it — pooling them would let a display flow take ownership of the shared
+   * container's handlers.
    */ setupIframeRequestHandlers(transport) {
         // Create a request channel to handle requests FROM iframe
         const requestChannel = createRequestChannel(transport);
-        if (this.secureStorage) {
-            // Handle getClientKeyShare requests from iframe
-            requestChannel.handle('getClientKeyShare', this.handleGetClientKeyShare.bind(this));
-            // Handle setClientKeyShare requests from iframe
-            requestChannel.handle('setClientKeyShare', this.handleSetClientKeyShare.bind(this));
-            // Handle removeClientKeyShare requests from iframe
-            requestChannel.handle('removeClientKeyShare', this.handleRemoveClientKeyShare.bind(this));
-        }
+        // handle() returns the unsubscribe; each entry here is one registration.
+        // secureStorage: key-share reads/writes, answered identically by any manager
+        // on the page, so they are not part of a detach.
+        const storageDisposers = this.secureStorage ? [
+            requestChannel.handle('getClientKeyShare', this.handleGetClientKeyShare.bind(this)),
+            requestChannel.handle('setClientKeyShare', this.handleSetClientKeyShare.bind(this)),
+            requestChannel.handle('removeClientKeyShare', this.handleRemoveClientKeyShare.bind(this))
+        ] : [];
+        // Session-scoped: both answer from this client's own session state, so a
+        // superseded manager must stop answering them the moment it is detached.
+        const sessionDisposers = [];
         if (this.getSignedSessionIdCallback) {
-            // Handle getSignedSessionId requests from iframe
-            requestChannel.handle('getSignedSessionId', this.handleGetSignedSessionId.bind(this));
+            sessionDisposers.push(requestChannel.handle('getSignedSessionId', this.handleGetSignedSessionId.bind(this)));
         }
+        // The iframe's 401 notification (iframe → host)
         if (this.onUnauthorized) {
-            // Handle the iframe's 401 notification (iframe → host)
-            requestChannel.handle('notifyUnauthorized', this.handleNotifyUnauthorized.bind(this));
+            sessionDisposers.push(requestChannel.handle('notifyUnauthorized', this.handleNotifyUnauthorized.bind(this)));
         }
-        return requestChannel;
+        return {
+            disposeSessionHandlers: ()=>drainDisposers(sessionDisposers),
+            disposeStorageHandlers: ()=>drainDisposers(storageDisposers),
+            requestChannel
+        };
     }
     /**
    * Handler for the iframe's `notifyUnauthorized` reverse-channel request.
@@ -1302,9 +1427,7 @@ class IframeManager {
             const iframeDisplay = new IframeMessageHandler(transport);
             // Set up iframe request handlers on this transport so the display iframe
             // can access key shares (e.g. for exportPrivateKey) and signed session ID
-            if (this.secureStorage || this.getSignedSessionIdCallback) {
-                this.setupIframeRequestHandlers(transport);
-            }
+            const requestHandlers = this.secureStorage || this.getSignedSessionIdCallback ? this.setupIframeRequestHandlers(transport) : undefined;
             var _this_authMode;
             // if authMode is header: inform iframe the authMode with auth token
             // if authMode is cookie:  inform iframe the authMode with empty authToken
@@ -1313,6 +1436,9 @@ class IframeManager {
                 iframe,
                 iframeDisplay,
                 cleanup: ()=>{
+                    if (requestHandlers) {
+                        disposeAllHandlers(requestHandlers);
+                    }
                     cleanupBridge();
                     iframe.remove();
                 }
@@ -1399,9 +1525,7 @@ class IframeManager {
             // Set up iframe request handlers on this transport so the display
             // container can access key shares (e.g. for exportPrivateKey) and the
             // signed session ID — mirrors initializeIframeDisplayForContainer.
-            if (this.secureStorage || this.getSignedSessionIdCallback) {
-                this.setupIframeRequestHandlers(transport);
-            }
+            const requestHandlers = this.secureStorage || this.getSignedSessionIdCallback ? this.setupIframeRequestHandlers(transport) : undefined;
             var _this_authMode;
             // if authMode is header: inform the container of the authMode with auth token
             // if authMode is cookie:  inform the container of the authMode with empty authToken
@@ -1409,6 +1533,9 @@ class IframeManager {
             return {
                 iframeDisplay,
                 cleanup: ()=>{
+                    if (requestHandlers) {
+                        disposeAllHandlers(requestHandlers);
+                    }
                     cleanupBridge();
                     waasSDKContainer.destroy();
                 }
@@ -1418,7 +1545,30 @@ class IframeManager {
             throw error;
         }
     }
+    /**
+   * Stops this manager answering the iframe's *session-scoped* reverse-channel
+   * requests (iframe → host), and nothing else. Call it on a manager superseded
+   * by a newer one for the same page.
+   *
+   * Every bridged manager answers every iframe → host request and the channel is
+   * first-response-wins, so a superseded manager with revoked host callbacks
+   * rejects `getSignedSessionId` instantly and beats the live one's round-trip —
+   * killing wallet creation for the life of the iframe.
+   *
+   * Narrow on purpose. The key-share handlers stay: they proxy host storage by
+   * address, so any manager answers them identically, and the iframe still needs
+   * them to clear shares during {@link cleanup}. Transport, bridge, recovery
+   * subscription and container membership stay too, so in-flight operations still
+   * get their responses (tearing them down makes an in-flight wallet creation hang
+   * forever). Use {@link cleanup} for a real teardown, and call this any time —
+   * including mid-initialization.
+   */ detach() {
+        this.requestHandlers.detach();
+    }
     async cleanup() {
+        // Detach up front, so a logged-out manager stops answering signed-session
+        // requests immediately instead of once the ACK below returns (or times out).
+        this.requestHandlers.markTornDown();
         // Best-effort ACK (the iframe clears its storage), only if already
         // initialized. Do NOT initialize here: that mounts a fresh container just to
         // ACK and then tears it down, churning the shared container across
@@ -1448,6 +1598,9 @@ class IframeManager {
         // detached one); re-arm the unauthorized guard for a future session.
         this.messageTransport = null;
         this.iframeMessageHandler = null;
+        // Key-share handlers go last: the iframe's cleanup above clears each wallet's
+        // shares over this channel and needs a host still answering.
+        this.requestHandlers.disposeStorageHandlers();
         this.iframeRequestChannel = undefined;
         this.unauthorizedHandled = false;
     }
@@ -1464,6 +1617,11 @@ class IframeManager {
    * it — otherwise the request channel's retry timer keeps firing recovery against
    * a torn-down transport on the next session. */ this.cleanupRecoverySubscription = null;
         this.iframe = null;
+        /**
+   * Lifetimes of the shared container's reverse-channel handlers: which of them
+   * a superseded manager stops answering ({@link detach}) and which outlive it
+   * until teardown ({@link cleanup}).
+   */ this.requestHandlers = new IframeRequestHandlerRegistry();
         this.waasSDKContainer = null;
         /** One-shot guard so a burst of 401 notifications triggers a single logout. */ this.unauthorizedHandled = false;
         this.environmentId = environmentId;

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@dynamic-labs-wallet/browser-wallet-client",
-  "version": "1.1.6",
+  "version": "1.1.8",
   "license": "MIT",
   "type": "module",
   "dependencies": {
-    "@dynamic-labs-wallet/core": "1.1.6",
+    "@dynamic-labs-wallet/core": "1.1.8",
     "@dynamic-labs/logger": "^5.0.0",
     "@dynamic-labs/message-transport": "^5.0.0"
   },

package/src/client/iframeManager/IframeManager.d.ts

@@ -92,6 +92,12 @@ export declare class IframeManager {
      * Used for secureStorage operations and signed session ID retrieval
      */
     protected iframeRequestChannel?: RequestChannel<Pick<IframeRequestMessages, 'getClientKeyShare' | 'setClientKeyShare' | 'getSignedSessionId' | 'notifyUnauthorized'>>;
+    /**
+     * Lifetimes of the shared container's reverse-channel handlers: which of them
+     * a superseded manager stops answering ({@link detach}) and which outlive it
+     * until teardown ({@link cleanup}).
+     */
+    private readonly requestHandlers;
     private static readonly maxAdditionalTrustedOrigins;
     private static readonly maxTrustedOriginStringLength;
     private readonly additionalTrustedOrigins;
@@ -220,6 +226,11 @@ export declare class IframeManager {
     private recoverIframe;
     /**
      * Sets up message handlers for iframe → host requests (secureStorage and getSignedSessionId)
+     *
+     * Returns the channel plus one disposer per lifetime group, covering exactly the
+     * handlers this call attached. Scoped per call because three different transports
+     * use it — pooling them would let a display flow take ownership of the shared
+     * container's handlers.
      */
     private setupIframeRequestHandlers;
     /**
@@ -320,6 +331,25 @@ export declare class IframeManager {
         iframeDisplay: IframeMessageHandler;
         cleanup: () => void;
     }>;
+    /**
+     * Stops this manager answering the iframe's *session-scoped* reverse-channel
+     * requests (iframe → host), and nothing else. Call it on a manager superseded
+     * by a newer one for the same page.
+     *
+     * Every bridged manager answers every iframe → host request and the channel is
+     * first-response-wins, so a superseded manager with revoked host callbacks
+     * rejects `getSignedSessionId` instantly and beats the live one's round-trip —
+     * killing wallet creation for the life of the iframe.
+     *
+     * Narrow on purpose. The key-share handlers stay: they proxy host storage by
+     * address, so any manager answers them identically, and the iframe still needs
+     * them to clear shares during {@link cleanup}. Transport, bridge, recovery
+     * subscription and container membership stay too, so in-flight operations still
+     * get their responses (tearing them down makes an in-flight wallet creation hang
+     * forever). Use {@link cleanup} for a real teardown, and call this any time —
+     * including mid-initialization.
+     */
+    detach(): void;
     cleanup(): Promise<void>;
 }
 //# sourceMappingURL=IframeManager.d.ts.map

package/src/client/iframeManager/IframeManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IframeManager.d.ts","sourceRoot":"","sources":["../../../src/client/iframeManager/IframeManager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,KAAK,sBAAsB,EAK3B,KAAK,qBAAqB,EAG1B,KAAK,oBAAoB,EAEzB,KAAK,gBAAgB,EACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAOL,KAAK,iCAAiC,EACtC,KAAK,cAAc,EAEpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAuC9E,qBAAa,aAAa;IACxB,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,MAAM,wCAAU;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAQ;IACjC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IACnC,aAAa,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAOhD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAClC,SAAS,CAAC,gBAAgB,EAAE,iCAAiC,GAAG,IAAI,CAAQ;IAC5E,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,CAAQ;IACnE;;oDAEgD;IAChD,OAAO,CAAC,aAAa,CAA6B;IAClD;;oDAEgD;IAChD,OAAO,CAAC,2BAA2B,CAA6B;IAChE,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAA8B;IAC9D,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAQ;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;IAChC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAS;IACzC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAK;IACtC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAK;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IACrD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAM;IAC9C,8BAA8B,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1D,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAiC;IACtE;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAA4B;IACjE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAEtC;;;;;OAKG;IACI,uBAAuB,EAAE,OAAO,CAAC;IACxC;;;;OAIG;IACH,SAAS,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAC/C;;;;OAIG;IACH,SAAS,CAAC,0BAA0B,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D;;;;OAIG;IACH,SAAS,CAAC,2BAA2B,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E;;;OAGG;IACH,SAAS,CAAC,oBAAoB,CAAC,EAAE,cAAc,CAC7C,IAAI,CAAC,qBAAqB,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,oBAAoB,CAAC,CACrH,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAM;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAO;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAoB;IAC7D,OAAO,CAAC,gBAAgB,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAyB;IAChE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAA6B;IAC7D,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,CAAS;gBAGlC,EACE,aAAa,EACb,UAAU,EACV,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,QAA0B,EAC1B,SAAS,EACT,KAAK,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,GACxB,EAAE;QACD,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,QAAQ,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7C;;;WAGG;QACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;;;;WAKG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,EACD,eAAe,CAAC,EAAE;QAChB,aAAa,CAAC,EAAE,oBAAoB,CAAC;QACrC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACxD,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;QAChD,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7C;IAwDH;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAuBxB,UAAU;IAShB;;;OAGG;IACH,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9C;;;OAGG;YACW,+BAA+B;IAS7C;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,0BAA0B;IA2BlC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IA+BxB,wFAAwF;IACxF,OAAO,CAAC,yBAAyB;IAgBjC;;OAEG;IACH,OAAO,CAAC,cAAc;IAKtB;;;;;;;;OAQG;IACH,OAAO,CAAC,2BAA2B;IAyCnC;;OAEG;cACa,0BAA0B;IAoD1C;;;;;;;OAOG;YACW,aAAa;IAkE3B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAsClC;;;;OAIG;YACW,wBAAwB;IAatC;;OAEG;YACW,uBAAuB;IAQrC;;OAEG;YACW,uBAAuB;IAOrC;;OAEG;YACW,0BAA0B;IAOxC;;OAEG;YACW,wBAAwB;IAWtC;;OAEG;YACW,aAAa;IAY3B;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAgBnC;uFACmF;IACnF,OAAO,CAAC,oBAAoB;IAK5B;sFACkF;IAClF,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAKrC;mFAC+E;IAC/E,OAAO,CAAC,sBAAsB;YAQhB,UAAU;IA4CxB,OAAO,CAAC,iCAAiC;IA0FzC,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAgG9B;;;;;;;;OAQG;IACG,mCAAmC,CAAC,EAAE,SAAS,EAAE,EAAE;QAAE,SAAS,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5F,MAAM,EAAE,iBAAiB,CAAC;QAC1B,aAAa,EAAE,oBAAoB,CAAC;QACpC,OAAO,EAAE,MAAM,IAAI,CAAC;KACrB,CAAC;IAqCF;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,8BAA8B;IA+CtC;;;;;;;;;;;OAWG;IACG,oCAAoC,CAAC,EAAE,gBAAgB,EAAE,EAAE;QAAE,gBAAgB,EAAE,gBAAgB,CAAA;KAAE,GAAG,OAAO,CAAC;QAChH,aAAa,EAAE,oBAAoB,CAAC;QACpC,OAAO,EAAE,MAAM,IAAI,CAAC;KACrB,CAAC;IAqCW,OAAO;CAoCrB"}
+{"version":3,"file":"IframeManager.d.ts","sourceRoot":"","sources":["../../../src/client/iframeManager/IframeManager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,KAAK,sBAAsB,EAK3B,KAAK,qBAAqB,EAG1B,KAAK,oBAAoB,EAEzB,KAAK,gBAAgB,EACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAOL,KAAK,iCAAiC,EACtC,KAAK,cAAc,EAEpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAwC9E,qBAAa,aAAa;IACxB,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,MAAM,wCAAU;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAQ;IACjC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAQ;IACnC,aAAa,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAOhD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAClC,SAAS,CAAC,gBAAgB,EAAE,iCAAiC,GAAG,IAAI,CAAQ;IAC5E,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,CAAQ;IACnE;;oDAEgD;IAChD,OAAO,CAAC,aAAa,CAA6B;IAClD;;oDAEgD;IAChD,OAAO,CAAC,2BAA2B,CAA6B;IAChE,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAA8B;IAC9D,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAQ;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;IAChC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAS;IACzC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAK;IACtC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAK;IAEpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IACrD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAM;IAC9C,8BAA8B,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1D,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAiC;IACtE;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAA4B;IACjE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAEtC;;;;;OAKG;IACI,uBAAuB,EAAE,OAAO,CAAC;IACxC;;;;OAIG;IACH,SAAS,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAC/C;;;;OAIG;IACH,SAAS,CAAC,0BAA0B,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D;;;;OAIG;IACH,SAAS,CAAC,2BAA2B,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E;;;OAGG;IACH,SAAS,CAAC,oBAAoB,CAAC,EAAE,cAAc,CAC7C,IAAI,CAAC,qBAAqB,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,oBAAoB,CAAC,CACrH,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsC;IAEtE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAM;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAO;IAC3D,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAoB;IAC7D,OAAO,CAAC,gBAAgB,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAyB;IAChE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAA6B;IAC7D,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,CAAS;gBAGlC,EACE,aAAa,EACb,UAAU,EACV,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,QAA0B,EAC1B,SAAS,EACT,KAAK,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,GACxB,EAAE;QACD,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,QAAQ,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7C;;;WAGG;QACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;;;;WAKG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,EACD,eAAe,CAAC,EAAE;QAChB,aAAa,CAAC,EAAE,oBAAoB,CAAC;QACrC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACxD,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;QAChD,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7C;IAwDH;;;;;;;;;OASG;IACH,OAAO,CAAC,MAAM,CAAC,eAAe;IAuBxB,UAAU;IAShB;;;OAGG;IACH,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9C;;;OAGG;YACW,+BAA+B;IAS7C;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,0BAA0B;IA2BlC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IA+BxB,wFAAwF;IACxF,OAAO,CAAC,yBAAyB;IAgBjC;;OAEG;IACH,OAAO,CAAC,cAAc;IAKtB;;;;;;;;OAQG;IACH,OAAO,CAAC,2BAA2B;IAyCnC;;OAEG;cACa,0BAA0B;IA0D1C;;;;;;;OAOG;YACW,aAAa;IAkE3B;;;;;;;OAOG;IACH,OAAO,CAAC,0BAA0B;IA2ClC;;;;OAIG;YACW,wBAAwB;IAatC;;OAEG;YACW,uBAAuB;IAQrC;;OAEG;YACW,uBAAuB;IAOrC;;OAEG;YACW,0BAA0B;IAOxC;;OAEG;YACW,wBAAwB;IAWtC;;OAEG;YACW,aAAa;IAY3B;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAgBnC;uFACmF;IACnF,OAAO,CAAC,oBAAoB;IAK5B;sFACkF;IAClF,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAKrC;mFAC+E;IAC/E,OAAO,CAAC,sBAAsB;YAQhB,UAAU;IA4CxB,OAAO,CAAC,iCAAiC;IA0FzC,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAgG9B;;;;;;;;OAQG;IACG,mCAAmC,CAAC,EAAE,SAAS,EAAE,EAAE;QAAE,SAAS,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5F,MAAM,EAAE,iBAAiB,CAAC;QAC1B,aAAa,EAAE,oBAAoB,CAAC;QACpC,OAAO,EAAE,MAAM,IAAI,CAAC;KACrB,CAAC;IAuCF;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,8BAA8B;IA+CtC;;;;;;;;;;;OAWG;IACG,oCAAoC,CAAC,EAAE,gBAAgB,EAAE,EAAE;QAAE,gBAAgB,EAAE,gBAAgB,CAAA;KAAE,GAAG,OAAO,CAAC;QAChH,aAAa,EAAE,oBAAoB,CAAC;QACpC,OAAO,EAAE,MAAM,IAAI,CAAC;KACrB,CAAC;IAuCF;;;;;;;;;;;;;;;;;OAiBG;IACI,MAAM;IAIA,OAAO;CA2CrB"}

package/src/client/iframeManager/IframeRequestHandlerRegistry.d.ts

@@ -0,0 +1,89 @@
+/**
+ * One `setupIframeRequestHandlers` call's worth of registrations, grouped by
+ * lifetime.
+ */
+export type IframeRequestHandlerRegistration = {
+    /**
+     * Unregisters the handlers that answer from this client's own session state
+     * (`getSignedSessionId`, `notifyUnauthorized`) — the ones a superseded manager
+     * must stop answering.
+     */
+    disposeSessionHandlers: VoidFunction;
+    /**
+     * Unregisters the handlers that proxy host key-share storage by address. Any
+     * manager on the page answers them identically, so they outlive a detach.
+     */
+    disposeStorageHandlers: VoidFunction;
+};
+/**
+ * Registry generations, captured before an await so a registration landing
+ * afterwards can be told apart from a current one. See {@link IframeRequestHandlerRegistry.adopt}.
+ */
+export type IframeRequestHandlerEpoch = {
+    detachGeneration: number;
+    cleanupGeneration: number;
+};
+/** Unregisters every handler in `disposers` and empties the list. */
+export declare const drainDisposers: (disposers: VoidFunction[]) => void;
+/** Unregisters both halves of a registration. */
+export declare const disposeAllHandlers: ({ disposeSessionHandlers, disposeStorageHandlers, }: IframeRequestHandlerRegistration) => void;
+/**
+ * Lifetime bookkeeping for the iframe → host ("reverse channel") request
+ * handlers one IframeManager has attached to the shared container.
+ *
+ * A page has one WaaS iframe but every client built on it stays bridged to it,
+ * so the reverse channel is first-response-wins: a superseded manager with a
+ * revoked session callback rejects `getSignedSessionId` instantly and beats the
+ * live client's round-trip. This registry is what lets such a manager leave the
+ * race (see {@link detach}) without disturbing the key-share handlers, which
+ * the iframe still calls back during teardown.
+ */
+export declare class IframeRequestHandlerRegistry {
+    /**
+     * Lists, not single entries: `initializeMessageTransport` checks its guard
+     * *then* awaits, so one manager can end up registered on two transports that
+     * both answer, and overwriting would orphan the first.
+     */
+    private readonly sessionDisposers;
+    private readonly storageDisposers;
+    /** Bumped by {@link detach}. */
+    private detachGeneration;
+    /** Bumped by {@link markTornDown}. */
+    private cleanupGeneration;
+    get sessionHandlerCount(): number;
+    get storageHandlerCount(): number;
+    /** Capture the current generations before awaiting the iframe. */
+    snapshot(): IframeRequestHandlerEpoch;
+    /**
+     * Takes ownership of a registration whose setup started at `epoch`, keeping
+     * whichever halves are still legitimate, and reports whether the registration
+     * is the manager's current one (the caller's channel is only worth keeping
+     * then). The host doesn't await `initialize()`, so a detach or a cleanup can
+     * land while the iframe is still loading — which one moved decides:
+     *
+     * - **Torn down** (cleanup): keep nothing. The lists this would land on are
+     *   already drained, so anything tracked here would stay attached to a
+     *   logged-out manager forever.
+     * - **Superseded** (detach): the session handlers would put this manager back
+     *   into the race, but its key-share handlers still answer honestly — and on a
+     *   first initialization they are the only ones the page has.
+     * - **Neither**: track both.
+     */
+    adopt(epoch: IframeRequestHandlerEpoch, registration: IframeRequestHandlerRegistration): boolean;
+    /**
+     * Stops answering the session-scoped requests, and nothing else. Safe to call
+     * repeatedly, and mid-initialization: a registration still in flight is
+     * adopted as "superseded".
+     */
+    detach(): void;
+    /**
+     * First phase of a teardown: leave the session race immediately, and mark
+     * anything still initializing as torn down rather than merely superseded. The
+     * storage handlers stay until {@link disposeStorageHandlers}, because the
+     * iframe's own cleanup clears each wallet's shares over this channel.
+     */
+    markTornDown(): void;
+    /** Second phase of a teardown: drop the key-share handlers, once the iframe has finished calling back. */
+    disposeStorageHandlers(): void;
+}
+//# sourceMappingURL=IframeRequestHandlerRegistry.d.ts.map

package/src/client/iframeManager/IframeRequestHandlerRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IframeRequestHandlerRegistry.d.ts","sourceRoot":"","sources":["../../../src/client/iframeManager/IframeRequestHandlerRegistry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C;;;;OAIG;IACH,sBAAsB,EAAE,YAAY,CAAC;IACrC;;;OAGG;IACH,sBAAsB,EAAE,YAAY,CAAC;CACtC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,cAAc,cAAe,YAAY,EAAE,KAAG,IAG1D,CAAC;AAEF,iDAAiD;AACjD,eAAO,MAAM,kBAAkB,wDAG5B,gCAAgC,KAAG,IAGrC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,qBAAa,4BAA4B;IACvC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsB;IACvD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsB;IACvD,gCAAgC;IAChC,OAAO,CAAC,gBAAgB,CAAK;IAC7B,sCAAsC;IACtC,OAAO,CAAC,iBAAiB,CAAK;IAE9B,IAAW,mBAAmB,IAAI,MAAM,CAEvC;IAED,IAAW,mBAAmB,IAAI,MAAM,CAEvC;IAED,kEAAkE;IAC3D,QAAQ,IAAI,yBAAyB;IAI5C;;;;;;;;;;;;;;OAcG;IACI,KAAK,CAAC,KAAK,EAAE,yBAAyB,EAAE,YAAY,EAAE,gCAAgC,GAAG,OAAO;IAiBvG;;;;OAIG;IACI,MAAM,IAAI,IAAI;IAKrB;;;;;OAKG;IACI,YAAY,IAAI,IAAI;IAK3B,0GAA0G;IACnG,sBAAsB,IAAI,IAAI;CAGtC"}